[redland-dev] [Raptor RDF Parsing and Serializing Library 0000296]: Provide a way to avoid calling xsltSetDefaultSecurityPrefs

Mantis Bug Tracker mantis-bug-sender at librdf.org
Mon Mar 30 06:25:44 CEST 2009


The following issue has been SUBMITTED. 
====================================================================== 
http://bugs.librdf.org/mantis/view.php?id=296 
====================================================================== 
Reported By:                Dave Beckett
Assigned To:                
====================================================================== 
Project:                    Raptor RDF Parsing and Serializing Library
Issue ID:                   296
Category:                   api
Reproducibility:            have not tried
Severity:                   minor
Priority:                   normal
Status:                     new
Parsing/Serializing Syntax: grddl 
====================================================================== 
Date Submitted:             2009-03-30 04:25
Last Modified:              2009-03-30 04:25
====================================================================== 
Summary:                    Provide a way to avoid calling
xsltSetDefaultSecurityPrefs
Description: 
Michael Stahl wrote 2008-09-29 on redland-dev (re Openoffice.org):

...plus, i recently found an additional issue:
raptor's grddl parser's init function calls the libxslt function 
xsltSetDefaultSecurityPrefs, which modifies a global variable in libxslt.
as a result, other parts of our program that use libxslt fail (see [1]).
i'm not sure exactly what to do about this, because i don't know the 
libxslt api. it would be nice if there were some way to set these security

prefs on the actual parsing or transformation function call. no, actually

that would not just be nice, but necessary.
ah, finally found these:
http://xmlsoft.org/XSLT/html/libxslt-security.html#xsltSetCtxtSecurityPrefs
http://xmlsoft.org/XSLT/html/libxslt-transform.html#xsltApplyStylesheetUser
i guess using these would work?

...
[1] http://www.openoffice.org/issues/show_bug.cgi?id=93768

====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-03-30 04:25 Dave Beckett   New Issue                                    
2009-03-30 04:25 Dave Beckett   Parsing/Serializing Syntax => grddl           
======================================================================



More information about the redland-dev mailing list